General
-
Target
JaffaCakes118_9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b
-
Size
726.4MB
-
Sample
241228-2q3ejstpdx
-
MD5
b60b64ca1759378a14e329c2da0584dc
-
SHA1
a24f921026178c736e0b010e40ab811765a6aece
-
SHA256
9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b
-
SHA512
a6b18870a7ea44d9deab77d5a260045e0bac8ee7fbbf1db7e673f3c2ada6dad59be680c787c4a6a793d3243698de93b253775812cc55382fb178af2f2a3c8d96
-
SSDEEP
196608:z8G40ydTNxM5sDGXOQ8TJ1cLWXm3U40Y5eCvWOIsUeF:zbydTNxM5sDN1XmX0ieCvWzbeF
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
raccoon
8c3e4aa007fb2f2defacc1f952806f72
http://51.255.211.170/
http://45.15.159.197/
-
user_agent
23591
Targets
-
-
Target
JaffaCakes118_9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b
-
Size
726.4MB
-
MD5
b60b64ca1759378a14e329c2da0584dc
-
SHA1
a24f921026178c736e0b010e40ab811765a6aece
-
SHA256
9452f935b6598f74a519eb3b0de56f35053b5b03e6b282dc89b0dd21a8c68e1b
-
SHA512
a6b18870a7ea44d9deab77d5a260045e0bac8ee7fbbf1db7e673f3c2ada6dad59be680c787c4a6a793d3243698de93b253775812cc55382fb178af2f2a3c8d96
-
SSDEEP
196608:z8G40ydTNxM5sDGXOQ8TJ1cLWXm3U40Y5eCvWOIsUeF:zbydTNxM5sDN1XmX0ieCvWzbeF
-
Raccoon Stealer V2 payload
-
Raccoon family
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-